CVE-2021-35239

A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink...

CVE-2021-35239

A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink...

CVE-2021-35239

CVE-2021-35239 describes a stored XSS vulnerability in SolarWinds Orion Platform, where a user with Orion map manage rights can store XSS via a text box hyperlink. Evidence across connected documents points to SolarWinds Orion Platform (pre- HF1 patch level 2020.2.6 HF1) as affected, caused by in...